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Question: 1 


A Citrix Administrator wants to configure independent and isolated access on a single appliance for 
three different departments to allow them to manage and isolate their own applications. 
How can the administrator isolate department-level administration? 


A. Configure dedicated routes in the admin partitions for each department. 
B. Configure Policy-based Routes for each department in the nsroot partition. 
C. Configure admin partitions that use dedicated VLANs. 

D. Configure a SNIP in each partition and bind a VLAN for the department. 


Answer: C 


Question: 2 


A Citrix Administrator is configuring Unified Gateway with authentication policies. 
Where should the administrator configure NetScaler Gateway authentication policies? 


A. Global level 

B. Unified Gateway level 
C. Content-Switching level 
D. NetScaler Gateway level 


Answer: D 


Question: 3 


Scenario: A Citrix Administrator needs to implement a Content Filter policy to ensure the following 
conditions are met: 

The user with source IP 10.100.32.211 should NOT be allowed to access the vserver 10.10.10.1. 

All other users from subnet 10.100.32.0/24 should have access to the vserver 10.10.10.1. 

Access to the vserver should be blocked for all the other users. 

Which policy expression will meet this requirement if the policy action is RESET and the policy is 
bound to the server (VIP:10.10.10.1)? 


A. REQ.IP.SOURCEIP != 10.100.32.211 | | REQ.IPSOURCEIP != 10.100.32.211 -netmask 255.255.255.0 
B. REQ.IP,SOURCEIP = = 10.100.32.211 | | REQ.IPSOURCEIP != 10.100.32.0 -netmask 255.255.255.0 
C. REQ.IPSSOURCEIP != 10.100.32.211 && REQ.IP.SSOURCEIP = = 10.100.32.0—netmask 255.255.255.0 
D. REQ.IPSSOURCEIP = = 10.100.32.211 && REQ.IPSOURCEIP != 10.100.32.0 -netmask 255.255.255.0 


Answer: A 
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Question: 4 


Scenario: A Citrix Administrator observes that when the client gets redirected to the URL 
www.citrix.com/owa/search?q-userbame, an HTTP 503 response is received from the Content 
Switching vServer. 

The relevant configuration is as follows: 


acd cs acton CS_Act_1 -targetL6Vserver SERVER 1 
add cs action CS_Act_2 -targe BVserver SERVER 2 
acd cs acton CS_Act_3 -targetL 8Vserver SERVER_3 
add cs action CS Att 4 -targetl BVserver SERVER_4 


366 cs pobty CS_Pol_1 -rule “http. REO URL path_and_query. CONTAINS connecti" -acson CS 7m 
add cs pošcy CS Po. 2 -rule “http REO. URL path_and_query EQ" owai)" -acton CS Act 2 

add cs polcy CS_Pol_3 -ruie “itp REO. URL path _and_query. CONTAINS(\owal'y" -action CS _Act_3 
add cs polcy CS_Pol_4 -rule hno REQ IS_VALID™acton CS Act_4 


bend cs vserver CS_vserverl -pokkyName CS _Pol_1 -prorty 100 
bind cs vserver CS_vserver1 -poicyName CS_Pol_2 -priorty 110 
bind cs veerver CS_vserver! -polcyName CS_Pol_4 -prorty 130 


How will the administrator correct the issue? 


A. Unbind CS_POL_2 
B. Unbind CS_POL_1 
C. Bind Policy Unbind CS_POL_2 with priority 90 
D. Bind Policy Unbind CS_POL_3 with priority 90 


Answer: C 


Question: 5 


A Citrix Administrator needs to match the host name ‘www.example.com’ in all HTTP requests. 
Which expression, when used, meets this requirement? 


A. HTTP.REQ.HOSTNAME.EQ(“www.example.com”) 

B. HTTP.REQ.HOSTNAME.(“example.com”) 

C. HTTP.RES.HOSTNAME.CONTAINS(“www.example.com”) 
D. HTTP.RES.HOSTNAME.EQ(“www.example.com”) 


Answer: A 


Question: 6 


What is the first thing a Citrix Administrator should create when creating a Server Certificate for 
NetScaler to secure traffic? 


A. A Certificate key-pair 
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B. A Private Key 
C. A Certificate Signing Request 
D. A Certificate Revocation list 


Answer: C 


Question: 7 


Scenario: A Citrix Administrator would like to grant access to a Junior Administrator on the NetScaler. 
The administrator would like to grant full access to everything except the following: 

Shell Access 

User Configuration access 

Partition Configuration access 

Which pre-existing command policy would meet the needs of the scenario? 


A. Superuser 
B. Network 
C. Operator 
D. Sysadmin 


Answer: C 


Question: 8 


Scenario: A Citrix Administrator used the commands in the screenshot to apply the user-agent check 
to all the virtual servers. However, the administrator observed that it is NOT being applied to the 
vServer lb_vsrv_www. 

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface. 


> 

> add policy patset bad agent set 

Done 

> bind policy patset bad agent set “Angry Bird” 

Done 

> bind policy patset bad agent set “ESS Update” 

Done 

> bind policy patset bad agent set “Microsoft NCSI” 

Done 

> add responder policy drop “HTTP . REQ . HEADER (\"User—Agent\”) .SET TEXT MODE 


(IGNORECASE) .CONTAINS ANY(\"bad agent set\”)” DROP 
Done 


> add responder policy Log true NOOP —logAction Record CIP 
Done 

> bind lb vserver lb vsrv www —policyName Log -priority 100 
—gotoPriorityExpression END -type REQUEST 

Done 

> bind responder global drop 100 END -type REQ DEFAULT 
Done 

> 
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What can be causing this issue? 


A. Pattern set is being used with global policies. 

B. Logging action is bound to the Responder policy. 

C. The bind type of the policy drop is Default Global. 
D. Two responder policies are bound to same vServer. 


Answer: D 


Question: 9 


Scenario: A Citrix Administrator is troubleshooting a NetScaler issue. The administrator goes to the 
command line and from the Shell, tails the ns.log to view the log in real time to find the issue. After a 
few minutes, the administrator noticed that the logs stopped scrolling and the issue was missed. 
How can troubleshooting continue using the ns.log? 


A. The ns.log needs to be downloaded to the client machine for full viewing. 

B. The ns.log service has stopped and needs to be restarted. 

C. The ns.log is still running. Press ‘Enter’ and the ns.log will resume. 

D. The ns.log has reached its 100 KB limit. Press ‘CTRL+C’ to stop it from running and issue the 
command “tail-f ns.log” to resume. 


Answer: A 
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